Keep PC Safe

The use of computers to commit crimes, has given rise to the field of forensic computing. Here

experts analyze computers and other forms of digital communications in order to find evidence

of a crime. This consists of identifying, preserving, analyzing and presenting digital evidence.

It has been estimated by experts in the legal industry that between 30 and 40 percent of all

documents used in the process of litigation were found through forensic investigations of the

relevant computers. If you suspect your company’s computers have been tampered with or

used in the commission of a criminal offense, then you need to protect the integrity of your

computer system. Whether the cause is a disgruntled employee who wiped out his computer

before leaving or individuals trying to hide evidence of fraud or embezzlement you will want to

do as little as possible to those computers until an expert can determine when information is on

them.

The first step in forensic computing is to find and recover any evidence that may be useful for

law enforcement or for prosecutors. The techniques for evidence recovery are similar to those

for data recovery. One difference is that the data may have been deliberately deleted, and

criminals with varying degrees of sophistication can be more successful at removing tracing of

incriminating evidence.

If you believe that you have a computer that that contains electronic evidence of a crime, do not

use it any further. Attempting to access the computer in any way may change the data

contained in the drive. Continuing to use the computer can overwrite the evidence making it

permanently unavailable.

A forensic computing expert is needed to properly analyze a computer and check for evidence

on it. An untrained user may accidentally delete important evidence. A trained and certified

expert can ensure that the data remains intact, and thus applicable to a court of law.

There are many crimes for which evidence may be found on the computer. Besides the usual

white collar crimes of money laundering, embezzlement, fraud and stock manipulation, there

can also be email records indicating sexual harassment or threats preceding a violent crime. By

mishandling a computer that you suspect to contain evidence of a crime, you could even be

found guilty of hindering prosecution.

Besides evidence of criminal offences, there may be evidence of professional misconduct on

your office computers. A forensic computer expert can help you determine whether an

employee is stealing from the company, or using company resources in an improper manner.

They may be able to hide their activities from you, but they will not be able to hide them from a

forensic expert.

There are many companies offering computer forensic expertise and evidence recovery. A

search on the internet should be able to find one near you.